# Implementation Roadmap
URL: https://docs.autociso.io/console/iso/roadmap/
Description: The Implementation Roadmap translates your gap analysis findings into a prioritized action plan. Each task represents a remediation step, usually mapped to an ISO 27001 control.

*This is the help text the console shows in the help panel on this page.*

The Implementation Roadmap translates your [gap analysis findings](https://docs.autociso.io/console/iso/gap-analysis/) into a prioritized action plan. Each task represents a remediation step, usually mapped to an ISO 27001 control.

### Priority Levels
Tasks are grouped by priority, with a count per group. The page subtitle shows how many tasks are done, open and blocking.
- **Blocking**: Must complete before Stage 2 audit.
- **High**: Should complete before Stage 2 to avoid major nonconformities.
- **Medium**: Important for long-term ISMS health; complete within the certification period.
- **Low**: Good practice items that can be scheduled for post-certification improvement.

### Task Cards
Each task shows its control ID, assignee, effort estimate, due date and a status tag (Not started, In progress, Completed or Won't Fix). Tasks with **Auto-verify** re-scan their control when you click **Mark Done**, which updates the gap analysis.

### Creating Tasks
Click **New Task** (the sparkle button) to have AI generate tasks from your current gap analysis; run the gap analysis first and generate again after each refresh. Click **Create Task** to add one manually.

### Jira Integration
On plans that include Jira & Slack remediation tasks ([The Seed and higher](https://docs.autociso.io/getting-started/plans-and-features/)), click **[Jira integration](https://docs.autociso.io/console/settings/integrations/)** to save your Jira site URL, email, project key and API token. Then use **Push to Jira** on a task to create a linked Jira issue; the Jira key appears as a link on the card.

## Fields

### Task Title

A concise action-oriented description of the remediation task.

**Example:** `Implement MFA for all admin accounts in AWS`, `Document the asset classification policy`.

### Description

Detailed guidance on what needs to be done, why, and any acceptance criteria.

### Control ID

The ISO 27001:2022 Annex A control this task addresses (e.g., `A.8.5` for Secure Authentication).

### Priority

The urgency of this task relative to your Stage 2 audit timeline: Blocking, High, Medium, or Low.

### Assigned To

The team member responsible for completing this task, entered as their user ID.

### Estimate (minutes)

Rough effort estimate in minutes. Shown on the task card.